$ rpki-client -vvf rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft File: pFVIOEAp8fN2pyJjKU0GWujJRCI.mft (raw, json) Hash identifier: TXuSGeeSXn+RTvMX09WfDpvvszgI+OeiX+B0AhXigHA= Subject key identifier: 87:FB:66:28:1D:B7:D1:7E:7D:10:93:F8:8D:C1:3E:63:3F:F6:D1:6E Authority key identifier: A4:55:48:38:40:29:F1:F3:76:A7:22:63:29:4D:06:5A:E8:C9:44:22 Certificate issuer: /CN=A9137992/serialNumber=A45548384029F1F376A72263294D065AE8C94422 Certificate serial: 0682 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pFVIOEAp8fN2pyJjKU0GWujJRCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft Manifest number: 067F Signing time: Sat 06 Sep 2025 16:57:58 +0000 Manifest this update: Sat 06 Sep 2025 16:57:58 +0000 Manifest next update: Sat 13 Sep 2025 16:57:58 +0000 Files and hashes: 1: pFVIOEAp8fN2pyJjKU0GWujJRCI.crl (hash: oqRzMhieNnsgDEKY3Uo9sd51l1uAcCEMSNcbl5WeJpI=) 2: 819B5C3274CB11EF941F0A71C4F9AE02.roa (hash: VjvaaM8L2XxhBSFFAzo+odtR38jKp4RPZEbo1pt7Hh0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.crl rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pFVIOEAp8fN2pyJjKU0GWujJRCI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 16:57:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1666 (0x682) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137992, serialNumber=A45548384029F1F376A72263294D065AE8C94422 Validity Not Before: Sep 6 16:57:58 2025 GMT Not After : Sep 13 16:57:58 2025 GMT Subject: CN=68bc6816-1b16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ca:bb:be:a3:87:d7:e4:d0:82:99:ff:f9:5c: f5:17:59:dc:1d:04:21:92:64:c3:e9:32:b5:22:c5: da:f0:10:d3:b3:6a:a4:7d:3e:ab:08:0d:4f:72:c1: e5:35:46:2d:66:16:85:e8:7b:e7:fd:74:26:8b:26: af:30:ed:f9:02:84:17:08:a3:fc:4c:24:fd:00:b2: f2:6c:f0:ff:ff:84:a0:0d:8a:75:5d:b3:a9:a6:75: 35:9f:06:cd:27:39:c5:1e:dd:35:55:45:d4:76:7d: e3:6e:f7:03:7b:7a:1b:67:97:59:f5:01:c8:45:a9: a5:31:f1:a5:ad:4b:23:55:02:23:ad:c5:f9:ac:5a: 86:21:02:c3:f0:0d:e6:f2:8e:99:6a:1e:9b:97:7a: 9b:3f:97:78:c2:1b:48:1a:ff:8f:d9:ad:d6:1e:1a: 0f:43:da:e1:ad:2a:8b:f3:9a:11:67:63:5f:49:5d: 67:6a:e5:d0:df:b2:3b:18:46:18:49:5d:77:39:fa: 38:ed:66:f2:c3:09:12:6b:4f:28:d3:5d:ff:f2:92: 29:fa:76:da:b8:5d:65:82:d9:8e:61:43:74:49:75: b5:4f:93:f5:7a:18:1d:3e:22:dc:9b:f5:74:93:fa: 0d:3c:67:ed:9e:13:bd:0c:4a:4f:42:35:cb:74:66: 41:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:FB:66:28:1D:B7:D1:7E:7D:10:93:F8:8D:C1:3E:63:3F:F6:D1:6E X509v3 Authority Key Identifier: keyid:A4:55:48:38:40:29:F1:F3:76:A7:22:63:29:4D:06:5A:E8:C9:44:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pFVIOEAp8fN2pyJjKU0GWujJRCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:0f:37:4d:a6:d0:8d:60:f7:ba:bf:b7:f8:9c:25:0d:41:c7: 27:a8:88:8e:17:d0:81:ff:81:30:60:90:a1:a3:a1:c0:b3:8b: c7:f1:83:02:0f:56:ee:57:6a:46:f9:56:21:42:4b:45:7a:c1: 29:fa:5e:fa:70:49:9e:b8:7c:35:fe:30:1b:b2:21:21:7c:3e: 3f:a5:44:7c:c0:04:b2:1c:3d:43:4e:ad:4f:63:ad:cc:61:e8: 3c:5d:be:85:5f:1a:b8:56:fc:18:98:e1:1a:88:76:0b:84:06: a8:88:a9:1f:0c:58:c1:2f:e8:33:fd:b6:f2:59:b0:74:36:a3: af:5b:ca:03:43:fa:2e:37:90:aa:a1:19:85:10:d5:e7:e8:5a: c1:8c:e0:b3:64:a8:06:7e:3e:20:a8:31:22:09:f3:70:83:49: 8b:77:84:83:a5:61:3a:84:6b:5a:0d:72:46:11:0c:7e:82:f6: 20:3c:8d:47:b7:6d:fb:0a:a4:9a:a5:e4:bb:af:dd:e6:38:ca: 25:10:a6:bc:fc:2f:ac:93:bb:e9:ce:38:17:c8:eb:fc:1c:c7: 46:91:e4:dc:bd:5e:0e:a2:27:b9:24:2e:4c:ab:22:f2:00:07: 89:8f:79:a5:d5:2c:b9:e1:99:90:dd:dc:e6:7b:cf:cb:e5:f9: fe:57:ed:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc5OTIxMTAvBgNVBAUTKEE0NTU0ODM4NDAyOUYxRjM3NkE3MjI2MzI5NEQwNjVB RThDOTQ0MjIwHhcNMjUwOTA2MTY1NzU4WhcNMjUwOTEzMTY1NzU4WjAYMRYwFAYD VQQDEw02OGJjNjgxNi0xYjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwcq7vqOH1+TQgpn/+Vz1F1ncHQQhkmTD6TK1IsXa8BDTs2qkfT6rCA1PcsHl NUYtZhaF6Hvn/XQmiyavMO35AoQXCKP8TCT9ALLybPD//4SgDYp1XbOppnU1nwbN JznFHt01VUXUdn3jbvcDe3obZ5dZ9QHIRamlMfGlrUsjVQIjrcX5rFqGIQLD8A3m 8o6Zah6bl3qbP5d4whtIGv+P2a3WHhoPQ9rhrSqL85oRZ2NfSV1nauXQ37I7GEYY SV13Ofo47WbywwkSa08o013/8pIp+nbauF1lgtmOYUN0SXW1T5P1ehgdPiLcm/V0 k/oNPGftnhO9DEpPQjXLdGZB9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIf7Zigd t9F+fRCT+I3BPmM/9tFuMB8GA1UdIwQYMBaAFKRVSDhAKfHzdqciYylNBlroyUQi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzk5Mi8xOEE4MUVGMDhE MkUxMUVCOTg0MEUwNUZDNEY5QUUwMi9wRlZJT0VBcDhmTjJweUpqS1UwR1d1akpS Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BGVklPRUFwOGZOMnB5SmpLVTBHV3VqSlJDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Nzk5Mi8xOEE4MUVGMDhEMkUxMUVCOTg0MEUwNUZDNEY5QUUwMi9wRlZJT0VBcDhm TjJweUpqS1UwR1d1akpSQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdDzdNptCNYPe6v7f4nCUNQccnqIiOF9CB/4EwYJCho6HAs4vH8YMC D1buV2pG+VYhQktFesEp+l76cEmeuHw1/jAbsiEhfD4/pUR8wASyHD1DTq1PY63M Yeg8Xb6FXxq4VvwYmOEaiHYLhAaoiKkfDFjBL+gz/bbyWbB0NqOvW8oDQ/ouN5Cq oRmFENXn6FrBjOCzZKgGfj4gqDEiCfNwg0mLd4SDpWE6hGtaDXJGEQx+gvYgPI1H t237CqSapeS7r93mOMolEKa8/C+sk7vpzjgXyOv8HMdGkeTcvV4Ooie5JC5MqyLy AAeJj3ml1Sy54ZmQ3dzme8/L5fn+V+1q -----END CERTIFICATE-----Generated at Sat Sep 6 21:04:36 2025 by rpki-client